NetSight
medium4.1

CVE-2026-84113

The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users s…

Impact

The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks.

Affected products

ProductAffected versions
Quentn WP WordPress Plugin
before 1.2.15

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References